This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json) Hash identifier: JUsnj+K9/Gs3HGH47wAutr2Nb7MBdnJEIXXuoZxWt8k= Subject key identifier: C0:7B:FB:D0:C0:FC:33:B9:55:0F:66:21:68:0B:66:36:42:7F:DC:19 Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Certificate serial: 019B3AFDAEABE6398737F5F0CF7E76BBB291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft Manifest number: 1182 Signing time: Sat 20 Dec 2025 09:01:02 +0000 Manifest this update: Sat 20 Dec 2025 09:01:02 +0000 Manifest next update: Sun 21 Dec 2025 09:01:02 +0000 Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=) 2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: N4Rj4vzxKtnQFRxfHMzYqkKW/0TaosD1ckyuOChoRvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:ae:ab:e6:39:87:37:f5:f0:cf:7e:76:bb:b2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Validity Not Before: Dec 20 09:01:02 2025 GMT Not After : Dec 21 09:01:02 2025 GMT Subject: CN=c07bfbd0c0fc33b9550f6621680b6636427fdc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:e9:c7:bc:5c:38:5e:32:81:87:c4:ec:1c: 35:b5:a4:8d:10:0d:a4:ca:16:a2:6f:f6:14:54:43: 13:b4:82:00:8a:4f:52:68:50:e8:ba:5d:44:e7:e9: ef:51:7a:13:e9:b5:e2:54:61:0d:35:ad:62:d4:6e: bd:79:b8:58:e2:02:d0:6a:74:45:63:fa:12:61:f7: f6:ab:66:4c:7b:dd:8a:4a:ab:a2:b2:41:2c:5a:d2: e8:c7:68:fa:5e:59:10:4d:b1:f6:3e:07:f9:4d:d0: 10:b6:c6:c7:5b:36:56:50:7d:c5:26:49:fd:71:d0: ee:b1:56:09:39:44:63:9d:3c:3d:4f:af:5e:44:98: e6:9f:30:94:48:e5:1f:9f:1e:33:68:b1:d0:da:d2: e7:40:3c:fe:e6:76:56:cd:a8:79:27:14:7d:80:08: 3e:de:4b:05:10:b6:44:a3:67:4a:a3:8e:1a:3d:70: 68:6a:5c:95:99:7b:8e:c5:f8:94:25:8d:3a:30:b6: 08:be:46:87:e4:e4:c8:81:1a:6f:21:aa:39:fc:4d: d1:45:6f:07:06:15:26:4d:da:bd:2b:ad:8d:9f:f4: 5a:5b:54:c3:96:75:3e:d6:1d:73:da:e2:79:05:dd: 59:6b:11:c1:0d:e4:d8:9d:cf:87:7e:92:6e:31:da: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7B:FB:D0:C0:FC:33:B9:55:0F:66:21:68:0B:66:36:42:7F:DC:19 X509v3 Authority Key Identifier: keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:33:92:f8:4c:2c:e7:d5:aa:18:a2:ac:2e:d0:ed:2e:d1:7e: b6:04:fd:3c:0c:32:2b:c8:a9:35:1d:0d:9f:4f:f5:ea:fb:8d: f9:d9:3b:a0:5b:d3:46:eb:97:31:7e:a6:2b:bc:fa:71:36:53: e7:ea:dd:ed:a0:0b:40:cb:3b:a9:7b:49:8f:18:ea:d3:28:1a: ff:d9:88:d2:b7:84:45:e3:33:9a:3d:1f:37:b9:b3:2c:90:c8: a0:26:77:85:23:c6:3d:1e:4f:a6:90:fe:60:29:1c:9b:4f:23: ba:34:74:30:7c:28:cb:de:cb:1e:7b:6f:cd:03:5a:45:c7:70: 97:31:2e:0a:2f:a1:4f:76:e0:12:90:86:7c:1d:dc:99:b6:3f: fc:fb:17:38:cd:f5:2f:6c:5a:99:f5:30:67:eb:0f:71:3d:19: cf:cc:4c:13:c9:ed:d3:15:58:35:a9:e6:aa:92:a5:92:4a:73: 28:9a:bf:0d:44:09:aa:3a:14:2a:0d:d9:ed:a1:66:a1:d1:fc: 15:70:fb:6a:c1:dd:4c:9f:f2:be:69:bc:d8:08:ff:b9:14:23: be:f5:f5:9b:6e:59:82:9f:09:11:81:cf:25:25:14:0a:6a:9e: a8:32:90:3e:d6:f1:13:f9:a4:b6:48:4f:60:54:08:7e:0d:f7: cc:b9:ba:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/a6r5jmHN/Xwz352u7KRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdiNjE2MTE3MTllYzdjOGUwMDEyYjFhZmY3ZTgxZmM3 Njg5YmQwHhcNMjUxMjIwMDkwMTAyWhcNMjUxMjIxMDkwMTAyWjAzMTEwLwYDVQQD EyhjMDdiZmJkMGMwZmMzM2I5NTUwZjY2MjE2ODBiNjYzNjQyN2ZkYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRvpx7xcOF4ygYfE7Bw1taSNEA2k yhaib/YUVEMTtIIAik9SaFDoul1E5+nvUXoT6bXiVGENNa1i1G69ebhY4gLQanRF Y/oSYff2q2ZMe92KSquiskEsWtLox2j6XlkQTbH2Pgf5TdAQtsbHWzZWUH3FJkn9 cdDusVYJOURjnTw9T69eRJjmnzCUSOUfnx4zaLHQ2tLnQDz+5nZWzah5JxR9gAg+ 3ksFELZEo2dKo44aPXBoalyVmXuOxfiUJY06MLYIvkaH5OTIgRpvIao5/E3RRW8H BhUmTdq9K62Nn/RaW1TDlnU+1h1z2uJ5Bd1ZaxHBDeTYnc+HfpJuMdqzgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB7+9DA/DO5VQ9mIWgLZjZCf9wZMB8GA1UdIwQY MBaAFFxXthYRcZ7HyOABKxr/foH8dom9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1Mjgt ZmEzMDcxYzQzNWYxLzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1MjgtZmEzMDcxYzQzNWYx LzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDOS+Ews 59WqGKKsLtDtLtF+tgT9PAwyK8ipNR0Nn0/16vuN+dk7oFvTRuuXMX6mK7z6cTZT 5+rd7aALQMs7qXtJjxjq0yga/9mI0reEReMzmj0fN7mzLJDIoCZ3hSPGPR5PppD+ YCkcm08jujR0MHwoy97LHntvzQNaRcdwlzEuCi+hT3bgEpCGfB3cmbY//PsXOM31 L2xamfUwZ+sPcT0Zz8xME8nt0xVYNanmqpKlkkpzKJq/DUQJqjoUKg3Z7aFmodH8 FXD7asHdTJ/yvmm82Aj/uRQjvvX1m25Zgp8JEYHPJSUUCmqeqDKQPtbxE/mktkhP YFQIfg33zLm6DA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:20:13 2025 by rpki-client